Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/Yav_wTnthnhUJgVUNCqahhzwsSo.roa
File: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (raw, json)
Hash identifier: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=
Subject key identifier: 61:AB:FF:C1:39:ED:86:78:54:26:05:54:34:2A:9A:86:1C:F0:B1:2A
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 019420D606A8E61BF1716F857030B89D2644
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/Yav_wTnthnhUJgVUNCqahhzwsSo.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12915
IP address blocks: 212.123.32.0/19 maxlen: 19
212.123.32.0/24 maxlen: 24
212.123.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:a8:e6:1b:f1:71:6f:85:70:30:b8:9d:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61abffc139ed867854260554342a9a861cf0b12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:6e:01:66:00:62:07:83:8d:4c:bd:d0:97:
3f:9e:f9:6f:fd:8c:41:d9:ce:f3:2a:a4:9f:9d:55:
48:d2:f2:79:1c:7c:87:bc:8a:b3:48:c9:77:11:ea:
f7:9d:b4:ec:d4:0f:80:4e:3f:90:ef:fd:db:57:be:
8e:46:b7:73:7e:bd:b8:1e:9b:6e:9a:78:4e:2e:3f:
ac:38:da:69:a0:9e:67:87:60:3b:3e:7f:ab:b8:c4:
30:7a:fe:14:c6:c3:a9:ec:e4:e6:01:9d:79:69:bc:
87:7b:63:fe:23:8f:23:f7:f2:3b:c8:c0:f8:af:80:
44:0d:30:53:8c:5f:3c:f6:4b:d9:4f:a6:76:da:75:
50:6b:d2:e1:69:25:98:f5:9e:15:83:0f:27:ec:0e:
f9:80:e0:9b:f2:50:d1:dc:80:69:63:b1:10:b9:03:
20:38:38:5a:90:d7:6c:42:9b:1c:92:f0:71:2e:23:
49:a7:52:75:46:c5:56:bb:81:c2:e7:fa:b4:3b:27:
24:e3:52:7b:c2:8f:45:f9:8e:5f:7a:42:98:a6:fd:
d0:0e:1b:78:c8:8d:a6:f5:7d:cf:00:4d:9a:e7:24:
53:46:9f:60:a2:bc:9a:cd:85:b4:88:3f:21:51:d6:
8f:5e:51:36:30:8f:f7:20:98:ff:67:63:cb:5a:0d:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:FF:C1:39:ED:86:78:54:26:05:54:34:2A:9A:86:1C:F0:B1:2A
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/Yav_wTnthnhUJgVUNCqahhzwsSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.123.32.0/19
Signature Algorithm: sha256WithRSAEncryption
31:c5:12:f0:e7:cb:97:44:c3:1a:ef:80:d1:e9:c2:d0:b3:53:
8e:aa:e7:a4:9d:83:d3:87:66:13:56:a6:99:19:17:3f:80:f7:
51:7c:ca:dc:4f:35:1f:33:a5:64:07:82:62:e7:4a:00:8c:41:
7c:0b:27:c3:27:74:4f:60:2d:5b:42:22:09:d7:0a:ae:c0:02:
34:73:a9:9c:bb:10:49:13:09:ad:ed:49:e3:8f:3d:05:fc:21:
fb:2b:d8:13:19:cb:b5:a0:0d:bb:af:af:20:9e:14:cd:16:c1:
1d:1b:c3:44:07:82:c8:65:bb:6e:88:b6:3b:8a:a3:6b:94:bc:
df:2c:1c:83:c3:32:02:63:4c:02:b7:97:0f:9a:7b:f0:82:8c:
fb:21:fd:c7:2e:39:59:e2:f8:a5:65:dc:80:1a:d5:98:e9:d2:
7b:a6:87:67:e2:61:0a:9e:51:b5:dd:23:c5:9e:94:d5:e8:07:
af:df:e4:9c:a3:7b:81:fd:df:cc:c1:4f:02:14:8d:af:ac:f9:
45:52:21:c2:a7:bd:46:e6:bb:74:6d:c6:aa:8c:48:89:82:5a:
71:65:24:a2:3c:84:54:77:33:71:63:04:3c:dd:3c:be:3f:f3:
76:b7:f3:2a:33:18:f2:5d:71:2f:8f:82:0b:ba:5e:dd:3c:6b:
bb:65:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:41 2025 by rpki-client